GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...

GHSA-395F-4HP3-45GV vulnerabilities

Vulnerabilities for packages: code-server...

GHSA-5F52-PX6M-C5HW vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58472 vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58469 vulnerabilities

Vulnerabilities for packages: wget...

GHSA-VV88-699V-W5RH vulnerabilities

Vulnerabilities for packages: wget...

GHSA-FXF9-RXPJ-26GX vulnerabilities

Vulnerabilities for packages: wget...

GHSA-WRJC-X8RR-H8H6 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-H8FP-F39C-Q6MH vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-R635-G3XR-VW7X vulnerabilities

Vulnerabilities for packages: redisinsight...

GHSA-2RP8-MM9Q-FP49 vulnerabilities

Vulnerabilities for packages: redisinsight...

CVE-2026-59725 vulnerabilities

Vulnerabilities for packages: redisinsight...

GHSA-957G-F97V-VPPC vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq-fips, apache-activemq, apache-nifi-registry...

GHSA-3CHG-M5W7-QFV5 vulnerabilities

Vulnerabilities for packages: camunda, apache-activemq-fips, apache-activemq, apache-nifi-registry...

DEBIAN-CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...

Июльский Linux Patch Wednesday

July Linux Patch Wednesday. A total of 2,017 vulnerabilities were addressed 539 in the Linux kernel and 504 in Chromium. For comparison, there were 1,888 vulnerabilities in June. Once again, a new record. Moreover, next month will most likely set another record, as 1,704 vulnerabilities have...

USN-8620-4: Linux kernel (Intel IoTG) vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service DoS attacks and even session hijacking, allowing an attacker to seize control of a user's network session. The findin...

Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2026-10842 etc.)

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about multiple vulnerabilities affecting WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in...

Revive Adserver 4.2 - Remote Code Execution

Revive Adserver 4.2 is susceptible to remote code execution. An attacker can send a crafted payload to the XML-RPC invocation script and trigger the unserialize call on the "what" parameter in the "openads.spc" RPC method. This can be exploited to perform various types of attacks, e.g...